article-prompts-to-skills
Pass
Audited by Gen Agent Trust Hub on Jul 19, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted external content from articles and tutorials, creating a surface for indirect prompt injection. However, the skill implements comprehensive defensive patterns: 1. Ingestion points: The agent reads provided article/tutorial source text. 2. Boundary markers: The skill mandates an 'Extraction Ledger' and a 'Portable Contract' to filter out source-specific packaging and incidental instructions. 3. Capability inventory: The skill is limited to local file creation and execution of repository-specific tools (git and quick_validate.py). 4. Sanitization: Step 7.8 explicitly requires scanning all changed files for secrets, tokens, and private data before committing code.
- [COMMAND_EXECUTION]: The skill instructs the agent to use local development tools such as
gitandquick_validate.py. These operations are used for repository state management and implementation validation, which are consistent with the skill's primary purpose as a developer workflow tool.
Audit Metadata